# DET0765 — Detection of Service Stop ## Descrição Estratégia de detecção DET0765. Plataformas: ICS. ## Data Components Necessários | Data Component | Descrição | |---|---| | [[dc0021-active-directory-object-modification\|DC0021 — Active Directory Object Modification]] | Telemetria necessária | | [[dc0032-process-creation\|DC0032 — Process Creation]] | Telemetria necessária | | [[dc0033-process-termination\|DC0033 — Process Termination]] | Telemetria necessária | | [[dc0041-service-metadata\|DC0041 — Service Metadata]] | Telemetria necessária | | [[dc0061-file-modification\|DC0061 — File Modification]] | Telemetria necessária | | [[dc0063-windows-registry-key-modification\|DC0063 — Windows Registry Key Modification]] | Telemetria necessária | | [[dc0064-command-execution\|DC0064 — Command Execution]] | Telemetria necessária | ## Analytics Relacionadas - [[an1897-analytic-1897|AN1897 (ICS)]] --- *Fonte: [MITRE ATT&CK — DET0765](https://attack.mitre.org/detectionstrategies/DET0765)*